Pen Test PC in the Lab

[John Drakes <tornado579 () gmail com>]

Hi All,

We provide Pen testing services for our clients. We have PT systems on
our LAN from where the tests are carried out with security tools and
some test malcious codes on them.
So the question is whether these systems should be moved to a separate
VLAN or they can reside on the normal LAN segment?  If kept on the LAN
segments what could be the risks involved? Also for these PT systems
only specific ports are opened.

Please give your inputs.

Thank you.

------------------------------------------------------------------------
This list is sponsored by: InfoSec Institute

Need to pass the CISSP? InfoSec Institute's CISSP Boot Camp in both Instructor-Led and Online formats is the most 
concentrated exam prep available. Comprehensive course materials and an expert instructor means you pass the exam. Gain 
a laser like insight into what is covered on the exam, with zero fluff! 

http://www.infosecinstitute.com/courses/cissp_bootcamp_training.html
------------------------------------------------------------------------